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H» U*iag of clatos ^ rcpIace ^ prior md ^ of ^ ta ^ 

Listing, of rhi^g. 

database associated with a web application from an application server, co mpr i Smg: 

generating a user registration page request by a user of the web application and 
forwarding the user registration page request to the application server; 

by the application server, embedding security registration data requirements in the user 
registration page request and forwarding the user registration page request to a user 
registration page of the web application; 

by the user registration page of the web application, merging the security registration data 
requirements from the application server with user profile registration requirements of the web 
application to form a user information request page; 

sending the user information request page from the web application to the user; 
returning a filled out user information request page to a pass through server target on the 
application server; 

extracting security data from the filled out user information page by the application 
server; and 

bootstrapping a user, account, for the web application, in the user database by the 
application server based upon the extracted security data. 

2. (Previously Presented) A method as recited in claim 1 . further comprising: 

forwarding the filled out user information request page to the web application by the 
application server. 
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»■ (Previous* Presented, A method as recited „ Cairn , , wherein ^ app)icalion ^ 
mates arable . set of ^ ^ ^ fc ^ ^ ^ ^ 

data required to bootstrap the user account in the user database. 

4. ff^ou Sly P re se nte d)An^a !re ci^ i nelam. I, wherein the web appHeaoon 
mciudes a success ta^e, and a fiuiure targe, ^ein the success targe, provides a success 
destadon when the bootstrapping is successful, and wherein the feitare targe, provides a ftilure 
destination when the bootstrapping is unsuccessful. 

5. (Original) A method a* recited in claim 4, wherein the success destination is a success 
URL and wherein the failure destination is a failure URL. 

6. (Cancelled) 

7. (Previously Presented) A method as recited in claim 2, wherein the forwarding the filled 
out user information page to the web application comprises: 

fonvarding a subset of the security data and the collected user profile data. 

8. (Original) A method as recited in claim 7, further comprising: 

extracting the collected user profile data from the forwarded filled out user information 

page. 

9. (Original) A method as recited in claim 8, wherein the collected user profile data is stored 
in a user profile database. 
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a mean, for gea^g . ^ regislration page ^ fcy ^ ^ rf ^ ^ 
and forwarding (he user reg^o , , page fc ^ ^ 

a m^ans fa. by *, server, embedding security region data requirements 

registration page of the web application; 

a means for, by the user registration page of the web application, merging the security 
registration data requirements from the application server with user profile registration 
requirements of the web application to form a user information request page; 

means for sending the user information request page from the web application to the 



a 

user: 



a means for returning a filled out user information request page to the application server; 
a means for extracting security data from the filled out user information page by the 
application server; and 

a means for bootstrapping a user account, for the web application, in the user database by 
the application server based upon the extracted security data. 

1 1. (Previously Presented) An apparatus as recited in claim 10, further comprising: 
a means for forwarding the filled out user information request page to the web 

application. 

12. (Previously Presented) An apparatus as recited in claim 10, wherein the application 
server makes available a set of user security requirement* to the web application that define 
security data required to bootstrap the user account in the user database. 
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13. ^^^)An. P ^^ M . md ^ !0v4 ^^ bappiica . m 
destination when the bootstrapping i$ unsuccessful. 

14. (Original) An apparatus as recited in claim 13, wherein the success destination is a 
success URL and wherein the failure destination is a failure URL. 

15. (Cancelled) 

16. (Previously Presented) An apparatus as recited in claim 1 1 , wherein the forwarding the 
filled out user information page to the web application comprises: 

forwarding a subset of the security data and the collected user profile data. 

1 7. (Original) An apparatus as recited in claim 1 6, further comprising: 

extracting the collected user profile data from the forwarded filled out user information 

page. 

18. (Original) An apparatus as recited in claim 17, wherein the collected user profile data is 
stored in a user profile database. 

19. (Currently Amended) A computer program product for enabling a computing system to 
bootstrap a user database associated with a web application from an application server, the 
computer program product in a browser/server environment comprising: 
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computer code ^.^^^^^^ 
application and folding the use, r_^^ page ^ tQ ^ ^ 
computer code for, by the application server, embedding security registration data 

request to a user registration page of the web application; 

computer code for, by the user registration page of the web application, merging the 
security registration data requirements from the application server with user profile registration 
requirements of the web application to form a user information request page; 

computer code for sending the user infonnation request page from the web application to 

the user, 

computer code for returning a filled out user information request page to the application 

server; 

computer code for extracting security data from the filled out user information page by 
the application server; 

computer code for bootstrapping a user account in the user database by the application 
server based upon the extracted security data; and 

a computer readable medium for storing the computer program product 
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